$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa File: 3268966f-7e93-369c-b103-620eb0e53038.roa (raw, json) Hash identifier: aPZnvL3oluCz8AEy+NFX8uMpdjukh4cjHNlgwWbuCJs= Subject key identifier: BC:C1:CB:7F:17:08:8F:B7:E0:FE:0D:FF:FB:FC:86:3B:59:D8:BA:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E8666FD5C7FC5F578CAD3F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 6167 IP address blocks: 174.233.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:6f:d5:c7:fc:5f:57:8c:ad:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=be5165f5-3ee7-4e94-a240-3116903a535c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:74:10:9d:ff:bd:a6:87:8a:0e:90:7a:b9: e5:de:62:da:0f:f7:a8:51:9c:95:4d:a2:cf:e1:92: 2f:23:26:a3:db:3c:81:b7:18:8f:ee:3d:08:33:56: a8:b5:36:bc:dc:f2:1d:6f:3c:e9:80:03:d9:1e:ce: 6d:9d:c0:f8:7a:9f:e0:d5:fe:6a:15:30:0f:eb:56: 71:b6:71:d5:bf:b0:95:d8:9a:9b:32:88:ec:09:78: c4:e2:f9:3c:21:bf:e2:1b:68:61:94:22:a6:81:86: 71:05:44:cc:a5:88:09:57:ee:a5:ec:77:fc:35:ef: c3:74:a8:48:7d:16:43:b0:6d:4c:52:2e:b8:96:43: 62:50:52:fe:79:1c:9b:ae:92:76:e7:94:79:cc:18: 4c:05:61:a9:33:ad:53:28:e9:ce:e5:fa:ef:99:3b: ac:15:39:80:cf:e9:15:7f:d9:1f:3a:c8:45:58:2e: 6f:25:88:e6:0a:43:5c:43:60:75:d5:f0:38:39:33: e4:a9:a8:85:a9:a7:7b:1c:b2:e6:a1:c9:61:8e:57: 3e:4a:97:de:85:19:77:c8:ed:d0:b1:c4:52:46:7f: 38:be:8b:44:9e:e9:9b:04:03:e9:0b:89:17:2b:94: d4:99:28:b9:59:e8:fa:e0:97:91:3a:e7:4a:9e:1d: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:CB:7F:17:08:8F:B7:E0:FE:0D:FF:FB:FC:86:3B:59:D8:BA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.233.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:72:f5:02:9a:32:fe:8d:6c:31:24:16:70:cf:96:0f:c6:e6: 24:8c:80:4f:fa:88:90:af:24:b4:da:dd:a3:72:7d:cc:b7:f4: 82:00:9e:cd:2b:83:13:c8:39:79:92:1e:0a:0f:a9:50:71:4c: 33:b4:44:a9:b9:be:bf:0b:1f:ff:93:e7:1f:29:88:19:9a:a7: 42:23:79:22:87:1b:f7:32:9f:5f:a9:b3:2a:80:d2:a0:95:26: a2:a7:c3:a9:b9:4d:0f:e6:96:15:e1:9d:71:ec:f3:57:97:c0: 3d:b2:70:03:15:63:5a:72:89:48:b6:54:40:90:ad:c0:26:98: 33:f7:18:86:b1:3c:5d:97:71:bb:b1:bc:64:84:8b:2c:47:d5: 33:4d:30:17:cd:c0:f7:f2:34:7a:2f:45:ea:f9:2c:2c:bc:f9: c6:69:8e:f9:86:2a:37:ce:28:80:53:3a:c5:85:00:38:2e:fb: cd:d3:08:72:af:63:c3:38:75:78:cd:b5:8e:22:52:39:34:66: 14:c7:5a:fc:35:0d:2d:f0:65:05:67:53:94:3f:bd:36:9e:a1: 13:a0:67:7c:56:72:ac:57:46:82:b9:97:be:58:13:f6:78:f1: 6b:18:92:20:c3:6d:23:a8:6a:07:bb:cf:a6:6d:d2:d6:50:c6: 61:77:90:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZm/Vx/xfV4ytPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk YmU1MTY1ZjUtM2VlNy00ZTk0LWEyNDAtMzExNjkwM2E1MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhl0EJ3/vaaHig6Qernl3mLaD/eoUZyVTaLP 4ZIvIyaj2zyBtxiP7j0IM1aotTa83PIdbzzpgAPZHs5tncD4ep/g1f5qFTAP61Zx tnHVv7CV2JqbMojsCXjE4vk8Ib/iG2hhlCKmgYZxBUTMpYgJV+6l7Hf8Ne/DdKhI fRZDsG1MUi64lkNiUFL+eRybrpJ255R5zBhMBWGpM61TKOnO5frvmTusFTmAz+kV f9kfOshFWC5vJYjmCkNcQ2B11fA4OTPkqaiFqad7HLLmoclhjlc+SpfehRl3yO3Q scRSRn84votEnumbBAPpC4kXK5TUmSi5Wej64JeROudKnh2WxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzBy38XCI+34P4N//v8hjtZ2Lo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzI2ODk2NmYtN2U5My0z NjljLWIxMDMtNjIwZWIwZTUzMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErukQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1y9QKaMv6NbDEkFnDPlg/G5iSMgE/6iJCvJLTa3aNyfcy39IIAns0r gxPIOXmSHgoPqVBxTDO0RKm5vr8LH/+T5x8piBmap0IjeSKHG/cyn1+psyqA0qCV JqKnw6m5TQ/mlhXhnXHs81eXwD2ycAMVY1pyiUi2VECQrcAmmDP3GIaxPF2Xcbux vGSEiyxH1TNNMBfNwPfyNHovRer5LCy8+cZpjvmGKjfOKIBTOsWFADgu+83TCHKv Y8M4dXjNtY4iUjk0ZhTHWvw1DS3wZQVnU5Q/vTaeoROgZ3xWcqxXRoK5l75YE/Z4 8WsYkiDDbSOoage7z6Zt0tZQxmF3kAY= -----END CERTIFICATE-----Generated at Sat Apr 5 21:44:54 2025 by rpki-client